PT-2017-1807

CVE-2017-0579

·

Published

2017-04-07

·

Updated

2019-10-03

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18
Description The issue is related to insufficient access control in the Qualcomm video driver of the Android operating system. It allows a remote attacker to elevate privileges and execute arbitrary code within the context of the kernel using a local malicious application. This issue is considered serious as it requires compromising a privileged process first.
Recommendations For versions Kernel-3.10 and Kernel-3.18, update to a version that includes the fix for this issue, as referenced by Android ID: A-34125463. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾